*Sep 22 11:34:39.105: %KAZULOG-6-STEPMARK: Message from tty434(user id: cisco): STEP2-BEGIN-20260922-202821
*Sep 22 11:34:39.142: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.20.1.1 (tty = 0) for user 'cisco' using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 22 11:34:39.527: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:34:39.948: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.20.1.1] [localport: 22] at 11:34:39 UTC Tue Sep 22 2026
*Sep 22 11:34:39.949: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:34:40.199: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.20.1.1 (tty = 0) for user 'cisco' using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 22 11:34:40.506: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:34:40.906: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.20.1.1] [localport: 22] at 11:34:40 UTC Tue Sep 22 2026
*Sep 22 11:34:40.907: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:34:41.202: %SYS-5-CONFIG_I: Configured from console by cisco on vty0 (10.20.1.1)
*Sep 22 11:34:41.382: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.20.1.1 (tty = 0) for user 'cisco' using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 22 11:35:41.760: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:35:42.074: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.20.1.1] [localport: 22] at 11:35:42 UTC Tue Sep 22 2026
*Sep 22 11:35:42.075: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:35:42.297: %SYS-6-LOGOUT: User cisco has exited tty session 434(10.20.1.1)
*Sep 22 11:35:42.297: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.20.1.1 (tty = 0) for user 'cisco' using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 22 11:37:31.619: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:37:32.019: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.20.1.1] [localport: 22] at 11:37:32 UTC Tue Sep 22 2026
*Sep 22 11:37:32.020: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:37:34.046: %SYS-6-LOGOUT: User cisco has exited tty session 434(10.20.1.1)
*Sep 22 11:37:34.047: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.20.1.1 (tty = 0) for user 'cisco' using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 22 11:37:34.358: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.20.1.1 (tty = 0) using crypto cipher 'chacha20-poly1305@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 22 11:37:34.751: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.20.1.1] [localport: 22] at 11:37:34 UTC Tue Sep 22 2026